affinity:
  nodeAffinity:
    requiredDuringSchedulingIgnoredDuringExecution:
      nodeSelectorTerms:
        - matchExpressions:
            - key: kubernetes.io/os
              operator: NotIn
              values:
                - windows
  podAntiAffinity:
    preferredDuringSchedulingIgnoredDuringExecution:
      - podAffinityTerm:
          labelSelector:
            matchLabels:
              app.kubernetes.io/component: resolvers
              app.kubernetes.io/instance: default
              app.kubernetes.io/name: resolvers
              app.kubernetes.io/part-of: tekton-pipelines
          topologyKey: kubernetes.io/hostname
        weight: 100
containers:
  - command:
      - /sbin/tini
      - --
      - /ko-app/resolvers
    env:
      - name: SYSTEM_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: KUBERNETES_MIN_VERSION
        value: v1.0.0
      - name: CONFIG_LOGGING_NAME
        value: config-logging
      - name: CONFIG_OBSERVABILITY_NAME
        value: config-observability
      - name: CONFIG_FEATURE_FLAGS_NAME
        value: feature-flags
      - name: CONFIG_LEADERELECTION_NAME
        value: config-leader-election-resolvers
      - name: METRICS_DOMAIN
        value: tekton.dev/resolution
      - name: PROBES_PORT
        value: "8080"
      - name: TEKTON_HUB_API
        value: https://api.hub.tekton.dev/
      - name: ARTIFACT_HUB_API
        value: https://artifacthub.io/
      - name: SSL_CERT_DIR
        value: /tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs
      - name: STATEFUL_SERVICE_NAME
        value: tekton-pipelines-remote-resolvers
      - name: STATEFUL_CONTROLLER_ORDINAL
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
    image: quay.io/openshift-pipeline/pipelines-resolvers-rhel9@sha256:b85fabac0cb767798cbe4a2d0ebe888e38b75d63f4232d85adb74dc02b717778
    imagePullPolicy: IfNotPresent
    name: controller
    ports:
      - containerPort: 9090
        name: metrics
        protocol: TCP
      - containerPort: 8008
        name: profiling
        protocol: TCP
      - containerPort: 8080
        name: probes
        protocol: TCP
    resources:
      limits:
        cpu: "1"
        memory: 4Gi
      requests:
        cpu: 100m
        memory: 100Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
          - ALL
      readOnlyRootFilesystem: true
      runAsNonRoot: true
      runAsUser: 1000790000
      seccompProfile:
        type: RuntimeDefault
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
      - mountPath: /tmp
        name: tmp-clone-volume
      - mountPath: /tekton-custom-certs/ca-bundle.crt
        name: config-trusted-cabundle-volume
        readOnly: true
        subPath: ca-bundle.crt
      - mountPath: /tekton-custom-certs/service-ca.crt
        name: config-service-cabundle-volume
        readOnly: true
        subPath: service-ca.crt
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: config-trusted-system-cabundle-volume
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-mvdcf
        readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: true
hostname: tekton-pipelines-remote-resolvers-0
imagePullSecrets:
  - name: tekton-pipelines-resolvers-dockercfg-d66sd
nodeName: hive4-pvmdf-worker-0-dp9rd
preemptionPolicy: PreemptLowerPriority
priority: 0
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
  fsGroup: 1000790000
  runAsNonRoot: true
  seLinuxOptions:
    level: s0:c28,c17
  seccompProfile:
    type: RuntimeDefault
serviceAccount: tekton-pipelines-resolvers
serviceAccountName: tekton-pipelines-resolvers
subdomain: tekton-pipelines-remote-resolvers
terminationGracePeriodSeconds: 30
tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  - effect: NoSchedule
    key: node.kubernetes.io/memory-pressure
    operator: Exists
volumes:
  - emptyDir:
      sizeLimit: 4Gi
    name: tmp-clone-volume
  - configMap:
      defaultMode: 420
      items:
        - key: ca-bundle.crt
          path: ca-bundle.crt
      name: config-trusted-cabundle
    name: config-trusted-cabundle-volume
  - configMap:
      defaultMode: 420
      items:
        - key: service-ca.crt
          path: service-ca.crt
      name: config-service-cabundle
    name: config-service-cabundle-volume
  - configMap:
      defaultMode: 420
      items:
        - key: ca-bundle.crt
          path: tls-ca-bundle.pem
      name: config-trusted-cabundle
    name: config-trusted-system-cabundle-volume
  - name: kube-api-access-mvdcf
    projected:
      defaultMode: 420
      sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
              - key: ca.crt
                path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
              - fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
                path: namespace
        - configMap:
            items:
              - key: service-ca.crt
                path: service-ca.crt
            name: openshift-service-ca.crt
